Websense 7.6 Products – ‘favorites.exe’ Authentication Bypass

• Exploit Database
• 13 阅读

• 作者： Ben Williams
  日期： 2011-12-15
• 类别：

  • webapps
  平台：

  • cgi
• 来源：https://www.exploit-db.com/exploits/36459/

• source: https://www.securityfocus.com/bid/51087/info
  
  Multiple Websense products are prone to an authentication-bypass vulnerability.
  
  Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access.
  
  The following Websense products are affected:
  
  Websense Web Security Gateway Anywhere 7.6
  Websense Web Security Gateway 7.6
  Websense Web Security 7.6
  Websense Web Filter 7.6 
  
  https://www.example.com/explorer_wse/favorites.exe?startDate=2011-10-22&endDate=2011-10-23&action=def